Yaroslav Halchenko
340a5a23f4
BF+ENH: fixed up testing querying cymru information + assert_dict_equal helper
2016-04-26 09:30:36 -04:00
jungle-boogie
d889918f19
update doc url
...
direct to confluence page. no code changes.
2016-04-24 21:35:18 -07:00
Daniel Aleksandersen
add67227f4
Use HTTPS in Debuggex URLs
2016-04-24 02:20:02 +02:00
Yaroslav Halchenko
aa303acfd6
Merge pull request #1381 from theDogOfPavlov/patch-3
...
Tightened up exim regexes to catch rDNS entries
2016-04-23 18:27:38 -04:00
sebres
e595fefc9b
change log and thanks entries
2016-04-14 14:50:17 +02:00
Alexandre Perrin
7712310d2d
Be more backward compatible on matching postfix/smtps/smtpd
...
Support trailing smtps also and not only smtpd.
suggested by @sebres
2016-04-14 13:54:58 +02:00
Alexandre Perrin
1a299409e5
Fix postfix/smtps/smtpd matching.
2016-04-14 12:10:58 +02:00
Alexey Korepanov
5773eb71b8
ensure /var/run/fail2ban is created in systemd service file
2016-04-12 21:20:19 +01:00
theDogOfPavlov
fcca1413b0
rDNS tests
...
added additional tests to cover logs with rDNS
2016-04-01 18:47:19 +01:00
theDogOfPavlov
1eb51b1bc2
Tightened up regexes to catch rDNS entries
2016-04-01 18:07:01 +01:00
Yaroslav Halchenko
1153c0a5c6
Merge pull request #1359 from yarikoptic/bf-blocktype
...
BF: Include iptables-common (not removed iptables-blocktype) within firewallcmd- actions
2016-04-01 07:19:28 -04:00
sebres
9d7e860edb
possibility to increase verbosity up to heavy debug (partial ported from 716-cs)
2016-04-01 10:38:11 +02:00
Yaroslav Halchenko
db2dd070ad
Merge pull request #1356 from opoplawski/bug-1354
...
Fedora use mariadb by default, fix log path
2016-03-31 22:11:10 -04:00
Serg G. Brester
b9b7ecbf6b
Merge pull request #1357 from sebres/monit-new-fltr
...
monit filter fixup for the new version (gh-1355)
2016-03-26 11:39:26 +01:00
TorontoMedia
3d239215cd
Two new firewalld actions with rich rules for firewalld-0.3.1+ (gh-1367)
...
closes #1367
2016-03-25 17:28:30 +01:00
sebres
ac27c9cb96
Merge branch 'patch-2' (gh-1371)
2016-03-25 17:05:23 +01:00
Serg G. Brester
0effe76971
Merge pull request #1370 from theDogOfPavlov/patch-1
...
Added regex for LDAP authentication failures
2016-03-25 15:30:39 +01:00
Serg G. Brester
fad4121709
Merge pull request #1365 from jblachly/sshd-pam-failed
...
SmartOS PAM Authentication failed (not failURE)
2016-03-24 13:47:49 +01:00
jblachly
e9202fa0b2
Placed failure (illumos) at end of regex
2016-03-24 00:43:15 -04:00
theDogOfPavlov
33ef2311e7
added tests to cover exim regex additions
2016-03-23 11:58:03 +00:00
theDogOfPavlov
28e246b5d7
added note to cover additional exim filters
2016-03-23 11:52:09 +00:00
theDogOfPavlov
42f43d0f8a
added note to cover dovecot ldap regex
2016-03-23 11:51:12 +00:00
theDogOfPavlov
eaf6bbb08f
add test to catch LDAP auth failures
2016-03-23 11:47:31 +00:00
theDogOfPavlov
fe1475be95
Additional exim regexes to cover common attacks...
2016-03-21 05:59:59 +00:00
theDogOfPavlov
cf2aa9c1c0
Added regex for LDAP authentication failures
2016-03-21 05:53:23 +00:00
jblachly
25c2334bc8
SmartOS PAM Authentication failed (not failURE)
...
SmartOS (and likely other Illumos platforms) enter log entries for failed sshd logins of the form:
`Authentication failed for USER from HOST`
The current sshd.conf regex matches `failure` -- add to this a match for `failed` to support Illumos
2016-03-16 13:52:01 -04:00
Yaroslav Halchenko
bfac42eb2e
changelog for journalmatch pure-ftpd
2016-03-14 11:10:28 -04:00
Yaroslav Halchenko
86024f745b
Merge pull request #1362 from weberhofer/patch-2
...
define journalmatch setting for pure-ftps
2016-03-14 11:09:16 -04:00
Johannes Weberhofer
bd25a43417
define journalmatch setting for pure-ftps
2016-03-11 18:19:53 +01:00
Yaroslav Halchenko
eed1a0d686
BF: Include iptables-common (not removed iptables-blocktype) within firewallcmd- actions ( Closes #1254 )
2016-03-09 23:06:59 -05:00
Orion Poplawski
f3f813a925
- mysqld does not log login attempts to the journal.
...
- Add /var/log/mysqld.log to mysql_log
2016-03-09 13:52:50 -07:00
sebres
9d13bb0c3a
ChangeLog and THANKS entries
2016-03-09 20:11:14 +01:00
sebres
37c9075fad
fixed monit filter: failregex find now both previous and new versions:
...
- failregex of previous monit version merged as single expression;
- extended failregex with new monit "access denied" version;
2016-03-09 20:06:14 +01:00
Orion Poplawski
dfc65018da
Fedora use mariadb by default, fix log path
2016-03-09 11:36:06 -07:00
Yaroslav Halchenko
d533c0761d
Merge pull request #1349 from yarikoptic/bf-tests-use-configdir
...
BF: use tests.utils.CONFIG_DIR instead of fixed one (Closes #1348 )
2016-03-08 09:11:34 -05:00
Yaroslav Halchenko
634e68036e
Get ready for further developments
2016-03-08 08:36:29 -05:00
Yaroslav Halchenko
bb0dc17a87
BF: use tests.utils.CONFIG_DIR instead of fixed one ( Closes #1348 )
2016-03-07 22:40:36 -05:00
Yaroslav Halchenko
0298ba2c1b
MANIFEST RELEASE and man pages updates
2016-03-07 21:50:10 -05:00
Yaroslav Halchenko
5ffc15ac68
Changes for the 0.9.4 release
2016-03-07 21:45:44 -05:00
Yaroslav Halchenko
150007b128
Merge pull request #1345 from sebres/dd-epoch-time-fix
...
datedetector: epoch time expression fix
2016-03-07 13:05:11 -05:00
sebres
e075815833
datedetector: epoch time expression fix (now 10-11 chars, only whole number - anchored ^...\b or by special case within [], audit()) + test cases extended (positive/negative)
2016-03-07 17:57:22 +01:00
Yaroslav Halchenko
19850d71e9
changelog about gentoo initd
2016-03-07 10:52:47 -05:00
Yaroslav Halchenko
5106b5943a
Merge pull request #1322 from jsuter1/master
...
gentoo-initd: Use start-stop-daemon in order to handle crashes better
2016-03-07 10:51:14 -05:00
Yaroslav Halchenko
385b50e4a9
Merge pull request #1343 from denics/master
...
adding wp-admin to bot search
2016-03-07 10:23:37 -05:00
Yaroslav Halchenko
ec54b74921
Merge pull request #1338 from yarikoptic/enh-return-mysql-suffix-back
...
Enh return mysql suffix back
2016-03-07 10:21:26 -05:00
Denix
ed0e572bfc
added wp-admin
...
bot are very annoying and I am getting a lot of checks on wp-admin. This should calm them.
2016-03-02 16:52:03 +01:00
Denix
04e932baa2
Merge pull request #1 from fail2ban/master
...
sync fork
2016-03-02 16:48:51 +01:00
Yaroslav Halchenko
a11c878fb2
ENH(TST): a hypothetical example to show/test needing trailing anchoring
2016-02-28 12:12:36 -05:00
Yaroslav Halchenko
6ffbc1ffad
ENH: revert back to having detailed suffix anchored at the end for mysqld-auto.conf
...
As discussed in https://github.com/fail2ban/fail2ban/pull/1333#discussion_r54100127
2016-02-28 12:07:46 -05:00
Yaroslav Halchenko
2adf5855ac
Changelog for the recent PR and added Tom to THANKS
2016-02-28 12:03:13 -05:00